CVE-2024-51559CWE-639

Improper Access Control Vulnerability in Wave 2.0

High · published November 4, 2024

CVSS v4.0
7.1
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-11-04T12:20Z
EPSS history
Timeline
  • 04 NOV 12:20Z
    Improper Access Control Vulnerability in Wave 2.0
    cvelistv5